[Secure-testing-commits] r42173 - data/CVE

[security tracker role]

Author: sectracker
Date: 2016-05-30 21:10:10 +0000 (Mon, 30 May 2016)
New Revision: 42173

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-30 20:04:36 UTC (rev 42172)
+++ data/CVE/list	2016-05-30 21:10:10 UTC (rev 42173)
@@ -3139,7 +3139,7 @@
 	NOTE: http://git.qemu.org/?p=qemu.git;a=commit;h=3a15cc0e1ee7168db0782133d2607a6bfa422d66 (v2.6.0-rc2)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/04/11/4
 CVE-2016-4008 (The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 ...)
-	{DSA-3568-1}
+	{DSA-3568-1 DLA-495-1}
 	- libtasn1-6 4.8-1
 	- libtasn1-3 <removed>
 	NOTE: http://www.openwall.com/lists/oss-security/2016/04/11/3
@@ -18415,7 +18415,7 @@
 	NOTE: gtk+2.0 2.21.5-1 removed the embedded copy of gdk-pixbuf and build-depends on external gdk-pixbuf
 CVE-2015-8875 [Integer overlows in pixops_* functions]
 	RESERVED
-	{DLA-450-1}
+	{DSA-3589-1 DLA-450-1}
 	- gdk-pixbuf 2.34.0-1
 	NOTE: Fixed by: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=dbfe8f70471864818bf458a39c8a99640895bd22 (2.33.1)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/05/12/3
@@ -18636,7 +18636,7 @@
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1288934
 	NOTE: Related to an incomplete RHEL backport of https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8ac2bde2a4a05c38e2bd733bea94507cb1461e06
 CVE-2015-7552 (Heap-based buffer overflow in the gdk_pixbuf_flip function in ...)
-	{DLA-450-1}
+	{DSA-3589-1 DLA-450-1}
 	- gdk-pixbuf 2.32.0-1
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=958963
 	NOTE: This was fixed by one of the commits between 2.31.6 and 2.32.0.